14 matches found
CVE-2026-8696
radare2 6.1.5 contains a use-after-free vulnerability in the gdbrpidslist function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses. Attackers can trigger the vulnerability ...
Malicious code in @tanstack/start-client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5561f0a3c6cc70a2aee56f25476fadbba6cc833f55c0dde246737b99f38c9e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-3487 Malicious code in @tanstack/start-client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5561f0a3c6cc70a2aee56f25476fadbba6cc833f55c0dde246737b99f38c9e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in traceviz-client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f13f02647de53cecc725fc4d06dbe6ba022bfcee2f3ee730df96d83db43e18f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1946 Malicious code in traceviz-client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f13f02647de53cecc725fc4d06dbe6ba022bfcee2f3ee730df96d83db43e18f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when utilizing multiple Eureka server service URLs with basic auth and encountering an issue with fetching the service registry. An attacker can gain access to credentials by examining th...
MAL-2022-7272 Malicious code in xfi-client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e64ce97b65c860af48cd5705f1900f14be88ebe32d5d3baa3902772cbb4ea61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in xfi-client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e64ce97b65c860af48cd5705f1900f14be88ebe32d5d3baa3902772cbb4ea61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-391 Malicious code in @logistics-frontend/client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ec68c4d34cf87350cff78bf89af4256fe327563a079c07c24cc75114db204ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @logistics-frontend/client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ec68c4d34cf87350cff78bf89af4256fe327563a079c07c24cc75114db204ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Server-Side Request Forgery
odata-client-core is vulnerable to cross-site request forgery CSRF. The AsyncRequestWrapperImpl class reads a URL from the Location header and sends a GET/DELETE request to the URL without verifying the authenticity of the request. This allows a remote attacker to trick a user into visiting a...
Debian DSA-3453-1 : mariadb-10.0 - security update
Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.23. Please see the MariaDB 10.0 Release Notes for further details : - https://mariadb.com/kb/en/mariadb/mariadb-10023-release- notes/...
